CVE-2021-32692

Activity Watch (aw-watcher-window) is vulnerable to OS command execution on macOS when pre-0.11.0 releases run. The flaw arises from printAppTitle.scpt, enabling an attacker to run arbitrary commands by persuading a user to visit a page with a crafted title (browser is the likely vector). Impact ...

Malicious code in aw-ks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cff3739992a698af9b21b0d3d1f8f1f6a4a88e219ebe686bd2f69f921d5ec51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1187 Malicious code in aw-ks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cff3739992a698af9b21b0d3d1f8f1f6a4a88e219ebe686bd2f69f921d5ec51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41573

Hitachi Content Platform Anywhere (HCP‑AW) versions 4.4.5 and later are affected by an information‑disclosure vulnerability. If an authenticated user creates a link to a file/folder while the system runs 4.3.x or earlier, shares the link, and later deletes the original item without deleting the l...

CVE-2021-41573: Files or Directories Accessible to External Parties

Hitachi Content Platform Anywhere HCP-AW 4.4.5 and later allows information disclosure. If authenticated user creates a link to a file or folder while the system was running version 4.3.x or earlier and then shares the link and then later deletes the file or folder without deleting the link and...

XSS vulnerability in WeiPHP 5.0 beta frontend Aw***.php at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. An XSS vulnerability exists in the frontend Aw.php of WeiPHP 5.0 beta version by Shenzhen Yuanmeng Yun Technology Co. Attackers can use this vulnerability to insert...

Mail.ru: Cross site scripting vulnerability in JW Player SWF

Flash-based XSS in aw-xbox.my.com...

aw-geschenke.com XSS vulnerability

Open Bug Bounty ID: OBB-616393 Description| Value ---|--- Affected Website:| aw-geschenke.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aw-podarki.com XSS vulnerability

Open Bug Bounty ID: OBB-616392 Description| Value ---|--- Affected Website:| aw-podarki.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aw-regali.com XSS vulnerability

Open Bug Bounty ID: OBB-616389 Description| Value ---|--- Affected Website:| aw-regali.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aw-regalos.com XSS vulnerability

Open Bug Bounty ID: OBB-616388 Description| Value ---|--- Affected Website:| aw-regalos.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aw-cadeaux.com XSS vulnerability

Open Bug Bounty ID: OBB-554669 Description| Value ---|--- Affected Website:| aw-cadeaux.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

aw-tarot.dk Open Redirect vulnerability

Vulnerable URL: http://www.aw-tarot.dk/redirect.asp?redirect=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 13.03.2016 Latest check for patch:| 13.03.2016 07:23 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

Google Chrome 4.1.249.1064 - Remote Memory Corrupt

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Save this script...

Google Chrome v4.0.249 XML Denial of Service PoC

Exploit for windows platform in category dos / poc ================================================ Google Chrome v4.0.249 XML Denial of Service PoC ================================================ Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link:...

AW BannerAd SQL Injection

AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x...

AW BannerAd (Auth Bypass) SQL Injection Vulnerability

No description provided by source. AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x...

AW BannerAd - Authentication Bypass

AW BannerAd - Authentication Bypass AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...

AW BannerAd (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== AW BannerAd Auth Bypass SQL Injection Vulnerability ===================================================== AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts...

AW BannerAd - Authentication Bypass

AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...